Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-70160 | high | 7.0 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70170 | medium | 6.5 | No | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-106564 | medium | 5.3 | No | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can ca... | 2026-10-22 |
| CVE-2026-70176 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70199 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose infor... | 2026-10-22 |
| CVE-2026-70209 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70232 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose infor... | 2026-10-22 |
| CVE-2026-70236 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70243 | high | 7.0 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70249 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70253 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-84284 | medium | 5.3 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 t... | 2026-10-22 |
| CVE-2026-70273 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-114176 | medium | 4.3 | No | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control S... | 2026-10-22 |
| CVE-2026-112868 | medium | 4.3 | No | Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Securi... | 2026-10-22 |
| CVE-2026-111851 | high | 7.6 | No | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in WProyal Royal Elementor Addons royal-ele... | 2026-10-22 |
| CVE-2026-96596 | not reported | — | No | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar modu... | 2026-10-22 |
| CVE-2026-86332 | medium | 6.5 | No | A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes... | 2026-10-22 |
| CVE-2026-112309 | high | 7.5 | No | @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite propert... | 2026-10-22 |
| CVE-2026-112304 | high | 7.5 | No | docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load with... | 2026-10-22 |